{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:S55BFJKP3KW46NIYQXKMJWIKBN","short_pith_number":"pith:S55BFJKP","canonical_record":{"source":{"id":"1806.05328","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-14T02:00:28Z","cross_cats_sorted":[],"title_canon_sha256":"dbf8f6be432d611d78c40e56bc0d8d72444c630d6eed93570b4a948b029d2bbd","abstract_canon_sha256":"49ddcc51fc5911a8b273aee213be745fdf198eda5adf4507f1a160f2046bde9b"},"schema_version":"1.0"},"canonical_sha256":"977a12a54fdaadcf351885d4c4d90a0b6d3a47cd6168d6149b764098476c1143","source":{"kind":"arxiv","id":"1806.05328","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1806.05328","created_at":"2026-05-18T00:13:16Z"},{"alias_kind":"arxiv_version","alias_value":"1806.05328v1","created_at":"2026-05-18T00:13:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1806.05328","created_at":"2026-05-18T00:13:16Z"},{"alias_kind":"pith_short_12","alias_value":"S55BFJKP3KW4","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_16","alias_value":"S55BFJKP3KW46NIY","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_8","alias_value":"S55BFJKP","created_at":"2026-05-18T12:32:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:S55BFJKP3KW46NIYQXKMJWIKBN","target":"record","payload":{"canonical_record":{"source":{"id":"1806.05328","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-14T02:00:28Z","cross_cats_sorted":[],"title_canon_sha256":"dbf8f6be432d611d78c40e56bc0d8d72444c630d6eed93570b4a948b029d2bbd","abstract_canon_sha256":"49ddcc51fc5911a8b273aee213be745fdf198eda5adf4507f1a160f2046bde9b"},"schema_version":"1.0"},"canonical_sha256":"977a12a54fdaadcf351885d4c4d90a0b6d3a47cd6168d6149b764098476c1143","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:13:16.324038Z","signature_b64":"tTaPTedC1XdoQT5iu4wgXSP3UuyMTGxPiJ31DlpgIPrBnZ1F/Z8VCUTiUHOK5wLAKOxvL6sBtHoirTyW6DIDCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"977a12a54fdaadcf351885d4c4d90a0b6d3a47cd6168d6149b764098476c1143","last_reissued_at":"2026-05-18T00:13:16.323394Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:13:16.323394Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1806.05328","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:13:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kbYFxwI4uCZguY6DfqxFaphq6CqnaUzzTEErp2zsO1w+UOICcvOj7332BGOt6mXZUSljz4gRcX5v6G2zfwxIAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T19:31:19.295133Z"},"content_sha256":"15277ba460fb3b158536576e2ae1210cd29e16567d927f2c420158b40438cd43","schema_version":"1.0","event_id":"sha256:15277ba460fb3b158536576e2ae1210cd29e16567d927f2c420158b40438cd43"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:S55BFJKP3KW46NIYQXKMJWIKBN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"o-glasses: Visualizing x86 Code from Binary Using a 1d-CNN","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Akira Otsuka, Atsuhiro Goto, Mamoru Mimura, Takeshi Sakaki, Yuhei Otsubo","submitted_at":"2018-06-14T02:00:28Z","abstract_excerpt":"Malicious document files used in targeted attacks often contain a small program called shellcode. It is often hard to prepare a runnable environment for dynamic analysis of these document files because they exploit specific vulnerabilities. In these cases, it is necessary to identify the position of the shellcode in each document file to analyze it. If the exploit code uses executable scripts such as JavaScript and Flash, it is not so hard to locate the shellcode. On the other hand, it is sometimes almost impossible to locate the shellcode when it does not contain any JavaScript or Flash but c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1806.05328","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:13:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xDhOBD/eKG9jBQsdXZjT5ZCZd4Bsg+gdj1aZkJzGlsFFscEp/rnkKxPfAPPt2OaoP2NZIwByuQd7GTq3pDjbCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T19:31:19.295506Z"},"content_sha256":"e18c56ccfde8c68e9646c67dbf9913ad2d89839b49f552883d6555cb688f7717","schema_version":"1.0","event_id":"sha256:e18c56ccfde8c68e9646c67dbf9913ad2d89839b49f552883d6555cb688f7717"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/S55BFJKP3KW46NIYQXKMJWIKBN/bundle.json","state_url":"https://pith.science/pith/S55BFJKP3KW46NIYQXKMJWIKBN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/S55BFJKP3KW46NIYQXKMJWIKBN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-06T19:31:19Z","links":{"resolver":"https://pith.science/pith/S55BFJKP3KW46NIYQXKMJWIKBN","bundle":"https://pith.science/pith/S55BFJKP3KW46NIYQXKMJWIKBN/bundle.json","state":"https://pith.science/pith/S55BFJKP3KW46NIYQXKMJWIKBN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/S55BFJKP3KW46NIYQXKMJWIKBN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:S55BFJKP3KW46NIYQXKMJWIKBN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"49ddcc51fc5911a8b273aee213be745fdf198eda5adf4507f1a160f2046bde9b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-14T02:00:28Z","title_canon_sha256":"dbf8f6be432d611d78c40e56bc0d8d72444c630d6eed93570b4a948b029d2bbd"},"schema_version":"1.0","source":{"id":"1806.05328","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1806.05328","created_at":"2026-05-18T00:13:16Z"},{"alias_kind":"arxiv_version","alias_value":"1806.05328v1","created_at":"2026-05-18T00:13:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1806.05328","created_at":"2026-05-18T00:13:16Z"},{"alias_kind":"pith_short_12","alias_value":"S55BFJKP3KW4","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_16","alias_value":"S55BFJKP3KW46NIY","created_at":"2026-05-18T12:32:50Z"},{"alias_kind":"pith_short_8","alias_value":"S55BFJKP","created_at":"2026-05-18T12:32:50Z"}],"graph_snapshots":[{"event_id":"sha256:e18c56ccfde8c68e9646c67dbf9913ad2d89839b49f552883d6555cb688f7717","target":"graph","created_at":"2026-05-18T00:13:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Malicious document files used in targeted attacks often contain a small program called shellcode. It is often hard to prepare a runnable environment for dynamic analysis of these document files because they exploit specific vulnerabilities. In these cases, it is necessary to identify the position of the shellcode in each document file to analyze it. If the exploit code uses executable scripts such as JavaScript and Flash, it is not so hard to locate the shellcode. On the other hand, it is sometimes almost impossible to locate the shellcode when it does not contain any JavaScript or Flash but c","authors_text":"Akira Otsuka, Atsuhiro Goto, Mamoru Mimura, Takeshi Sakaki, Yuhei Otsubo","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-14T02:00:28Z","title":"o-glasses: Visualizing x86 Code from Binary Using a 1d-CNN"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1806.05328","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:15277ba460fb3b158536576e2ae1210cd29e16567d927f2c420158b40438cd43","target":"record","created_at":"2026-05-18T00:13:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"49ddcc51fc5911a8b273aee213be745fdf198eda5adf4507f1a160f2046bde9b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-14T02:00:28Z","title_canon_sha256":"dbf8f6be432d611d78c40e56bc0d8d72444c630d6eed93570b4a948b029d2bbd"},"schema_version":"1.0","source":{"id":"1806.05328","kind":"arxiv","version":1}},"canonical_sha256":"977a12a54fdaadcf351885d4c4d90a0b6d3a47cd6168d6149b764098476c1143","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"977a12a54fdaadcf351885d4c4d90a0b6d3a47cd6168d6149b764098476c1143","first_computed_at":"2026-05-18T00:13:16.323394Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:13:16.323394Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tTaPTedC1XdoQT5iu4wgXSP3UuyMTGxPiJ31DlpgIPrBnZ1F/Z8VCUTiUHOK5wLAKOxvL6sBtHoirTyW6DIDCw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:13:16.324038Z","signed_message":"canonical_sha256_bytes"},"source_id":"1806.05328","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:15277ba460fb3b158536576e2ae1210cd29e16567d927f2c420158b40438cd43","sha256:e18c56ccfde8c68e9646c67dbf9913ad2d89839b49f552883d6555cb688f7717"],"state_sha256":"4bf9e6b68bc2c50c99040eff0dbfd61ed45c36631f7a654deb1cbe3d2cd9c844"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+iSpI8AzOHOmFTtkl4MJp8eK4ntmvF+hFvKwrBJXUGr+RvDpwqkfC+22Fj45iFUnfK73bXkTG69/lqTkMaaHBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-06T19:31:19.297493Z","bundle_sha256":"8a1e4071c366ba797af950f7d647248142a6a6b9f7381b0c3d8f9e6854261a18"}}